Critical-risk tools in Sidemail MCP Server

Critical severity Sidemail MCP Server MCP Server 4 of 19 tools

4 of the 19 tools in Sidemail MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

delete-contact Destructive

Delete a contact by email address (Sidemail API)
delete-domain Destructive

Delete a sending domain (Sidemail API)
delete-email Destructive

Delete a scheduled email by ID (Sidemail API). Only emails not yet sent can be deleted.
delete-messenger-draft Destructive

Delete a Messenger draft (Sidemail Messenger API)

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Sidemail MCP Server

Tools at critical risk

Attacks that target this class

More on Sidemail MCP Server

Enforce policy on every Sidemail MCP Server tool call.